A cryptographic anonymous form suite. Respondents can submit to a form while their identity stays protected, and the people collecting the responses still get data they can act on.
respondent form owner
| |
| 1. prove eligibility |
|------------------------>|
| |
| 2. submit response, |
| unlinkable to (1) |
|------------------------>|
| |
| 3. read responses, without identities
Figure 1: Eligibility and identity are kept apart (illustrative)